Internal Control Matrix for
Audit of Labor and Accounting Controls

1. MANAGEMENT REVIEWS

Control Objective

Monitor the overall integrity of the labor/timekeeping system.

Example Control Activities

Examinations of the labor accounting system, including the testing of labor charges for accuracy, and performance of unannounced floor checks in accordance with company policy and/or IIA standard.

Audit Procedures

a. Verify that periodic reviews of contractor’s labor system policies and procedures are conducted to ensure that:

• Policies and procedures are compliant with applicable Federal regulations and contact terms.

• Policies and procedures have been implemented and are working effectively.

• Follow-up actions are taken on recommendations resulting from management reviews.

b. Evaluate the contractor’s record of completed internal audits and its current internal audit plan to determine if the labor system is being subjected to periodic reviews in accordance with established policies and procedures.

c. Identify and selectively evaluate documentary evidence and the frequency of the contractor’s management reviews to determine whether the scope of such reviews are appropriate, the conclusions sound, and appropriate follow-up actions were taken.

d. Identify any reviews which may have an impact on this examination, and evaluate the reports and supporting working papers to determine if any system deficiencies were noted and the extent to which we can rely on the work performed (see CAM 4-1000).

2. EMPLOYEE AWARENESS TRAINING

Control Objective

Reasonably assure that all employees are aware of the importance of proper time charging.

Example Control Activities

The contractor’s procedures address formal company-wide timekeeping and labor charging training with provisions for refresher courses, covering the following:

• Programs for new hires emphasizing the employee’s responsibility for accurate recording of labor.

• Programs stressing management’s responsibility to provide for the accurate recording of labor hours.

• Periodic refresher courses on proper timekeeping and labor charging practices, especially for employees found not to be complying with company labor charging procedures.

• An explanation of the penalties for knowingly mischarging time. This should include penalties imposed by the company and those by the Government (i.e., False Claims Act).

• The importance of maintaining a segregation of duties for labor-related activities to prevent the appearance of and opportunities for improprieties.

Audit Procedures

a. Determine whether the policies and procedures address formal company-wide timekeeping and labor charging training with provisions for refresher courses, and require formal documentation of employee attendance.

b. On a test basis, evaluate the contractor’s employee sign-in logs, memoranda recording attendance, agenda, etc., to verify that training has occurred.

3. LABOR AUTHORIZATION/APPROVALS

Control Objective

Controls the accumulation and recording of labor costs allocable to cost objectives for the purpose of determining proper cost reimbursement on Government contracts.

Example Control Activities

Work authorization and/or job assignments, to the extent practical, are controlled and issued independent of those responsible for performing the work.

Labor documentation/work descriptions clearly identify the nature of the work performed and are trackable to an end-cost objective, whether allowable or unallowable/direct or indirect. Work descriptions are sufficiently detailed to determine the allowability and allocability of the labor charges to Government contracts.

Audit Procedures

a. Determine if policies and organizational structure provide for adequate control over work authorizations and require authorizations to be issued independently of those performing the work, to assure the integrity of labor recording procedures. Particular attention should be given to the procedures used to control the opening and closing of work authorizations.

b. Select a random sample of work authorizations to determine who initiated the documents. Compare these authorizations to the organizational chart to verify separation of duties.

c. Determine if policies require detailed descriptions of the work to be performed.

d. In conjunction with steps 6.d., request the purchase orders, contracts, etc., for the work authorizations selected in step 3.b. Verify that the description on the work authorization clearly relates to the item(s) required on the originating document(s).

4. TIMEKEEPING

Control Objective

Assure that labor hours are accurately recorded and that any corrections to timekeeping records are documented, including appropriate authorizations and approvals.

Example Control Activities

Manual systems provide for the accurate and complete recording of labor hours, as well as appropriate controls to ensure corrections to labor records are accurate and authorized. Generally, they may be categorized as procedures which pertain to:

• Supervisory observation of employee arrival and departure to prevent improper clock-in/clock-out.

• Employee possession of timecard/time sheet.

• Employee preparation of their timecard in ink, and as work is performed.

• Allowing only one card/sheet to be prepared per employee per period; cards/sheets are preprinted with employee name and identification number; and are turned in to the designated timekeeping office or collected by an authorized person.

• Precoded data being printed on the job cards for identification purposes so employees will know the job being charged and can relate it to the task being performed.

• Direct labor employees recording their time no less often than daily. Sufficient formal subsidiary records are maintained, if necessary, to assure accurate time recording and allocating to intermediate and final cost objectives when multiple jobs are worked in a day.

• Corrections being made in ink, initialed by the employee, properly authorized, and sufficiently explained and documented.

• Employees and supervisors signing the timecards/timesheets in accordance with procedures, verifying the accuracy of the recorded effort.

Automated systems provide for the accurate and current recording of labor hours by authorized employees, as well as appropriate controls to ensure corrections to labor charges are accurate and authorized. Generally, they may be categorized as procedures which pertain to:

• Only the employee using their labor charging instrument to access the labor system.

• Employee badge issuance being sufficiently controlled so that no number is duplicated and badges are not issued to unauthorized persons.

• Procedures being in place which require the employee to report lost badges promptly.

• Changes being initialed and dated by the employee and supervisor and the need to describe the reason for the change, unless controlled by bar coding, etc.

Audit Procedures

a. Determine if the contractor’s policies and procedures are adequate to maintain the integrity of the timekeeping system.

b. In conjunction with step 5.e., select a random sample of employees for floor checks, verifying that the established timekeeping procedures are being followed. (Note: To the extent possible, the auditor should rely on work performed under MAAR 6.)

5. LABOR DISTRIBUTION

Control Objective

Reasonably assure the proper recording of labor costs to cost objectives.

Example Control Activities

The total labor hours reflected in labor distribution summaries agree with the total labor charges as entered into the timekeeping and payroll systems. Each employee’s time is distributed as recorded and reflects the accounting for all hours worked.

The contractor has procedures to ensure that all hours worked include both compensated and uncompensated overtime, to assure the proper distribution of labor and related indirect costs.

An audit trail exists which documents direct and indirect labor charges to the appropriate cost objectives, depending on the system used.

Audit Procedures

a. Determine if policies and procedures require that hours recorded in the timekeeping system are reconciled, either manually or automatically as part of normal IT operations, with attendance records and labor distribution summaries.

b. Verify that the contractor performs reconciliations of timecards to attendance records and labor distribution summaries. If these reconciliations are performed as part of the IT operations, the auditor should document in the w/p’s and design appropriate tests to verify the effectiveness of the computerized procedures.

c. Determine if procedures exist for equitable recording of uncompensated overtime, see CAM 6-410, “Evaluation of Uncompensated Overtime.”

d. Determine if procedures require that direct and indirect labor charges be supported by sufficient evidential matter to verify the allocability to final cost objectives, and that they are traceable to approved work authorizations.

e. Concurrently with step 4.b., request the work authorizations for the labor charges sampled to verify that the charges are valid and traceable to final cost objectives.

6. LABOR COST ACCOUNTING

Control Objective

Reasonably assure that labor costs charged to the Government are in compliance with promulgated Cost Accounting Standards, Acquisition Regulations, Generally Accepted Accounting Principles, and contract terms/clauses.

Example Control Activities

The contractor has procedures which address significant increases in direct/indirect labor accounts for reasonableness and allocability.

Policies and procedures address briefing of special contract terms and advance agreements relative to allowability and allocability of labor costs. The contractor identifies all contract terms with Government costing implications such as military standards, overtime, skill mix requirements, etc., to ensure compliance with those terms.

Direct and indirect labor costs directly associated with unallowable costs are identified and segregated. While this is an important control procedure during indirect cost examinations, the auditor should be aware of this requirement under FAR 31.201-6 and CAS 405.

Lump sum wages resulting from union contracts are accounted for in accordance with EITFIS 88-23. The matching concept requires that lump sum payments benefiting future periods should be deferred and amortized over the period benefited (i.e., the period covered by the union contract).

The contractor has procedures which address overtime authorization requirements prescribed by FAR 22.103, if applicable.

Policies and procedures address retention of labor records which comply with the current FAR requirements. The contractor has procedures which address the retention of labor records such as payroll records, labor distribution records, work authorizations, etc.

Audit Procedures

a. Evaluate the procedures to determine if they address comparative analysis of sensitive accounts. Procedures should also address changes in labor charging practices to assure consistency with CAS.

b. Request the contractor’s documentation of its review of sensitive accounts to verify compliance and to identify any areas that require further analysis.

c. Determine if policies require the briefing of contracts for relevant contract terms and conditions impacting labor.

d. In conjunction with step 3.d., request contractor briefing documents or contracts impacting overtime, skill mix, etc. Obtain a sample of payroll/personnel records to evaluate compliance with contract terms.

e. Determine that policies require the identification and segregation of unallowable direct and indirect labor costs.

f. Verify that the chart of accounts and the contractor’s disclosure statement identify and describe the treatment of unallowable direct and indirect labor costs.

g. Determine if policies require that lump-sum wages resulting from union contracts be amortized, if applicable (see CAM 7-2119).

h. If applicable, request an amortization schedule from the contractor and evaluate for compliance with the requirements outlined in CAM 7-2119.

i. Determine if policies regarding overtime authorization and the allocability of overtime premiums address the concerns in CAM 6-409.

j. On a test basis, evaluate documentation supporting the authorization of overtime to determine that the contractor is in compliance with FAR 22.103, where applicable.

k. Determine if adequate policies exist for the retention of records, as outlined in FAR 4.705-1.

7. PAYROLL PREPARATION AND PAYMENT

Control Objective

Provide reasonable assurance that payrolls are prepared by persons independent of those responsible for the timekeeping operations and actual payroll payment, and pay rates are appropriately authorized and accurate.

Example Control Activities

Segregation of responsibilities between timekeeping and payroll, to reduce the opportunity to allow any person to be in a position to both perpetrate and conceal errors or irregularities such as fictitious employees, improper time charges, etc.

Policies and procedures address the accuracy of the labor costs; in particular, that pay rates are appropriately authorized.

Audit Procedures

a. Evaluate current organizational charts, job descriptions, etc., to determine if there is a sufficient division of duties between personnel responsible for the preparation of time and attendance records, and those responsible for the preparation and distribution of the payroll.

b. Ascertain whether procedures require that the pay rates in effect be supported by written authorization from the personnel department or other authorized source.

c. On a test basis, verify that pay rates are officially authorized.

d. Determine if procedures require cross-checks, either manual or computerized, within the payroll department, for verifying the accuracy of names, rates of pay, hours worked, extensions, and accounting distributions.

e. Verify that the contractor performs the required cross-checks in accordance with established procedures by analyzing evidentiary documentation. If these cross-checks are computerized, the auditor should document the w/ps and design appropriate tests to verify the effectiveness of the automated procedures.

8. LABOR TRANSFERS AND ADJUSTMENTS

Control Objective

Provide reasonable assurance that labor transfers or adjustments of the labor distribution are documented and approved.

Example Control Activities

Management has established a system for documenting, approving, and reviewing the transfer of labor costs from one cost objective to another. Written justification is required for any such transfer, to ensure the proper allocation of labor costs to final cost objectives.

Labor distribution edit errors are processed into a suspense account and billed to customers only after correction.

Reports of suspense labor and edit errors are generated and provided to the appropriate personnel for review and corrective action.

Audit Procedures

a. Determine that policies and procedures exist for approving and reviewing labor transfers, and that a relevant written explanation is required for the transfer. NOTE: Particular attention should be given to “online” adjustments. In these cases, the auditor should evaluate controls in place to ensure that unauthorized or undocumented adjustments are prevented or detected in a timely manner.

b. On a test basis, verify the contractor’s compliance with established procedures for labor transfers by analyzing evidentiary documentation.

c. Determine if policies require that labor charging errors be suspended until evaluated, officially authorized, and corrected.

d. On a test basis, verify the contractor’s compliance with established procedures for correction of labor charging errors by analyzing evidentiary documentation. Note: To the extent possible, the auditor should rely on work performed under MAAR 10.